Skip to content
Adhiwakta logo — scales of justice in a shield cradled by a handAdhiwakta
Ask

Cybercrime complaint basics in India

OTP scams, account takeover, and online fraud: first actions, reporting ideas, and why speed matters — educational overview.

Send your question on WhatsApp

WhatsApp opens with your question already written. You just tap send.

Quick answer

If money was taken by online fraud, call 1930 (National Cyber Crime Helpline) at once. The first hour matters most, because only money still in the fraudsters' accounts can be put on hold. Then file the complaint on cybercrime.gov.in and keep the acknowledgement number. Also tell your bank in writing: under RBI rules, if the fraud was not your fault or the bank's and you report within 3 working days, your liability is zero, and the bank should credit the amount within 10 working days. Money that is put on hold usually comes back only through the police and a court or Lok Adalat order; it is not automatic and no one can promise recovery. Never pay anyone who offers to 'recover' your money.

Team Adhiwakta · Updated 2026-10-27

Scammed? What to do now — 3 questions

    Did the money go in the last 24 hours?

    Cyber fraud complaint, step by step

    1. Call 1930 right away

      Give the amount, date and time, your bank, the transaction ID / UTR and the fraudster's UPI ID, account or phone number. Ask for the complaint number.

    2. File on cybercrime.gov.in

      Choose financial fraud, fill in each transaction and upload screenshots. Save the acknowledgement number; police and the bank will ask for it.

    3. Tell your bank in writing

      Use the bank's fraud helpline, app or email and block the card or UPI. Report within 3 working days for zero liability and keep the bank's complaint number.

    4. Lock your accounts

      Change UPI PIN and passwords from a safe phone, remove screen-sharing apps, and contact your mobile operator if your SIM stopped working.

    5. Keep every proof

      Screenshots, SMS, call log, chats, links and the bank statement. Do not delete the chat or block the number before saving everything.

    6. Follow up with the cyber police

      Ask the cyber cell or police station whether an FIR was registered and how much money is on hold. You can also file an FIR or e-FIR yourself.

    7. Ask for release of the held money

      Money on hold is usually released by a Magistrate's order (BNSS s.503, old CrPC s.457) or through a Lok Adalat, after a police report. Keep copies of every document.

    Documents you need

    • Transaction ID / UTR, date, time and amount of each payment
    • Bank statement or passbook page showing the debit
    • Screenshots of chats, calls, SMS, links and the fraudster's profile
    • Fraudster's UPI ID, account number or phone number
    • 1930 complaint number and cybercrime.gov.in acknowledgement
    • Your ID proof and the bank's complaint number

    Cost and timelines

    Cost of complaint
    Nothing. 1930, cybercrime.gov.in and an FIR are all free
    When to report
    Immediately; the first hour gives the best chance to put money on hold
    Bank: zero liability
    Report within 3 working days when neither you nor the bank was at fault (RBI, 2017)
    Bank: 4–7 working days
    Limited liability, ₹5,000 to ₹25,000 per transaction by account type
    Bank credit and decision
    Amount credited within 10 working days; complaint decided within 90 days
    Release of held money
    Often weeks to months; needs police report and a court or Lok Adalat order

    The law and sources

    Is your situation a little different? Send your question on WhatsApp.

    Write in Hindi or English · general guidance, not legal advice

    Ask on WhatsApp

    Act fast on money and access

    Call your bank or UPI app support, freeze cards if needed, change passwords from a safe device, and note transaction IDs and screenshots.

    Reporting channels people use

    National cybercrime portals and local police complaints are common paths. Keep copies of every report number. Exact steps can vary by state and case type.

    What not to share online

    Never paste OTP codes, passwords, full card numbers, or private keys into websites or chats — including Adhiwakta forms.

    General guidance

    After you secure accounts, you can Ask for general guidance from independent advocates on how to describe the incident. No outcome is guaranteed.

    Frequently asked questions

    How soon should I report online fraud?
    Immediately. Call 1930 within the first hour if you can, then file on cybercrime.gov.in. Fraudsters move money through many accounts quickly, and only money that is still there can be put on hold.
    Will I definitely get my money back?
    No one can promise that. Your chances are better if you report fast and the money is put on hold. Separately, your bank must follow RBI liability rules for unauthorised transactions.
    The bank says I shared the OTP. Do I lose everything?
    Under the RBI circular, if the loss happened because you shared credentials, you bear the loss until you report it; the bank bears losses after your report. The bank must prove your negligence. Still report to 1930, because held money can be returned through the police and court.
    Someone is offering to recover my money for a fee. Is it real?
    Almost always a second scam. Police, 1930 and banks never charge to return money. Do not pay, and report the number on cybercrime.gov.in.
    Do I also need an FIR?
    The portal complaint goes to the police, who may register an FIR. For a large loss, or if the police ask, file an FIR or e-FIR yourself and keep the copy; it helps in the bank dispute and the release of money.
    What if my bank does not reply?
    If the bank does not resolve it within 30 days, or you are unhappy with the reply, complain to the RBI Ombudsman at cms.rbi.org.in. It is free.

    Share Adhiwakta with someone who needs it

    Send this page on WhatsApp — legal information in Hindi & English.

    Ask on WhatsAppForm